Thank you for taking the time to report this bug and help to improve Ubuntu.
Can you please attach the full /var/log/apt/term.log and /var/log/apt/history.log files from your system? The failure occurs because the shim-signed package detects that you need to enroll a new Machine Owner Key (MOK) into firmware to continue using dkms under Secure Boot, but apt is running noninteractively, so it's not possible to prompt for a password in order to coordinate this with the firmware. Normally when you are doing unattended-upgrades, this is ok because we assume that if you previously had your system working despite not being able to load unsigned dkms modules, it will continue to work. In your case, an upgrade appears to have introduced a NEW dkms module (oem-audio-hda-daily). This is unusual. And when a new dkms module is introduced, we cannot assume that your system will work correctly without adding the MOK. There is insufficient information in your logs to explain why this shows up as a new dkms module. It may be a bug in the dkms and shim scripts to detect when modules are new; or it may be a bug in the updates for introducing a new module. More complete logs should help us tell. ** Changed in: shim-signed (Ubuntu) Status: New => Incomplete -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1818644 Title: package shim-signed 1.33.1~16.04.4+15+1533136590.3beb971-0ubuntu1 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/shim-signed/+bug/1818644/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs